Fake IT Calls Target Executives in Microsoft 365 Data Theft and Extortion Attacks

Threat actors are targeting executives, primarily directors and vice presidents, in a widespread campaign to steal data and extort money. The attacks focus on Microsoft 365 and other software-as-a-service offerings. The threat actors use various tactics, including fake IT help desk calls, token theft, and proxy sign-ins. The goal of these attacks is to gain access to sensitive information. Executives are the main targets of this campaign.